Privacy Policy

Redeem Advisory Group ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. Please read this policy carefully to understand our practices regarding your personal data.

This policy is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable state and federal privacy laws. This site does not collect, store, or transmit protected health information (PHI) and is therefore not subject to HIPAA; any health-related details shared voluntarily are handled only as described below.

We may collect the following types of information:

• Personal Information: Name, email address, phone number, business name, and other contact details you provide when booking a consultation, registering for events, or completing intake forms.
• Business Information: Business stage, industry, annual revenue, entity structure, employee count, business goals, and challenges shared during consultations or onboarding.
• Payment Information: Billing details processed securely through our payment provider, Stripe. We do not store full card numbers on our servers.
• Usage Data: Information about how you interact with our website, including IP address, browser type, pages visited, and referral sources, collected via cookies and similar technologies.
• Communications: Emails, messages, and notes from your interactions with our team.

We use the information we collect for the following purposes:

• To provide advisory, consulting, and business formation services you request.
• To schedule and confirm consultations, including creating calendar events and sending reminders.
• To process payments and manage billing.
• To send you information about resources, programs, and services relevant to your business (only where you have provided marketing consent).
• To respond to your inquiries and provide customer support.
• To improve our website, services, and client experience.
• To comply with legal obligations and protect our rights.

Under the GDPR, we process your personal data only where we have a lawful basis to do so, including:

• Consent: Where you have given clear affirmative consent (e.g., submitting a form or accepting cookies).
• Contract: Where processing is necessary to provide a service you have requested.
• Legal Obligation: Where processing is required to comply with a legal obligation.
• Legitimate Interests: Where processing is in our legitimate interests and does not override your rights.

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service Providers: Trusted third parties that assist with payments (Stripe), email delivery, calendar management (Google), and analytics, under contractual confidentiality obligations.
• Legal Compliance: When required by law, court order, or to protect our legal rights and safety.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred subject to this policy.

We retain your personal and business information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your data at any time, subject to our legal retention requirements.

We implement appropriate technical, administrative, and physical safeguards to protect your personal information. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Our website uses cookies and similar technologies to enhance your browsing experience, analyze traffic, and track marketing effectiveness. We use two categories of cookies:

• Essential Cookies: Necessary for the website to function and cannot be switched off.
• Non-Essential Cookies: Used for analytics and marketing; these are only loaded after you provide consent via our cookie banner.

You may disable cookies through your browser settings, and you can withdraw your cookie consent at any time by clearing your browser's local storage or contacting us.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the GDPR:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, or share.
• Right to Delete: Request deletion of your personal information.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information. You may opt out of any "sharing" of personal information for cross-context behavioral advertising by contacting us.
• Right to Limit Use of Sensitive Personal Information: Request that we limit the use of your sensitive personal information.
• Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.

To submit a request, contact us using the information below. We will verify your identity before processing your request and respond within 45 days, as required by law.

To exercise any of your rights under the GDPR or CCPA/CPRA — including access, deletion, correction, opt-out, or withdrawal of consent — please contact us at marlaryj@redeemadvisorygroup.com. We will process your request in accordance with applicable law.

This website and our advisory services are not designed to collect, store, or transmit protected health information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA). We are not a covered entity or business associate under HIPAA. If you voluntarily share any health-related information, it will be handled only for the purpose you provided it and in accordance with this Privacy Policy. If you require services involving PHI, please contact us to discuss a HIPAA-compliant arrangement.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any websites you visit.

Your information may be transferred to and processed in countries other than your country of residence, including the United States. Where required by the GDPR, we will ensure such transfers are made under appropriate safeguards, such as Standard Contractual Clauses, or another lawful transfer mechanism.

Our services are intended for business owners and professionals aged 18 and older. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided us with personal data, please contact us for removal.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions or concerns about this Privacy Policy or your personal data, please contact us: